What’s Vulnerable › Vulnerabilities

CVE-2004-0351

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-11-23 · updated 2026-06-16

Description

Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data.

Affected products

• Spidersales: 2.0

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html
• http://marc.info/?l=bugtraq&m=107833097705486&w=2
• http://www.securityfocus.com/bid/9799
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15370
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html
• http://marc.info/?l=bugtraq&m=107833097705486&w=2
• http://www.securityfocus.com/bid/9799
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15370

Get alerted when CVE-2004-0351 or the next vulnerability affects your stack